Ty Thac Co Listed by thegentlemen Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 20, 2026, the ransomware group thegentlemen listed Ty Thac Co. on its leak site and stated that internal files had been taken from the Vietnamese footwear manufacturer. The number of individuals affected remains unknown, and no further technical details about the intrusion have been released publicly. The listing places the incident among the many ransomware operations that combine encryption with the threat of data publication. Ransomware groups continue to target manufacturing and supply-chain companies because these organisations maintain extensive networks of partners, suppliers and logistics records. When such a firm appears on a leak site, the immediate questions concern the scope of the exfiltration and whether the data can be used for further criminal activity.

Inside the incident

The only confirmed information is the June 20, 2026 listing by thegentlemen and the group’s assertion that internal files were removed during a ransomware attack. No statement has been issued by Ty Thac Co., and independent confirmation of the data’s contents or volume has not been made public. The date of the intrusion itself, the method of initial access and any ransom demand remain undisclosed.

The group behind it: thegentlemen

Thegentlemen is a ransomware operation that maintains a public leak site to publish material taken from victims that do not meet its demands. The group follows the common pattern of encrypting systems and then threatening to release stolen files. Its listings are presented as claims by the actors themselves; independent verification of the material’s authenticity or completeness is rarely available at the time of posting.

Who is Ty Thac Co?

Ty Thac Co., Ltd., also known as Yih Shuo Footwear, was established in 2011 and operates a large production facility in Thap Muoi District, Dong Thap Province, Vietnam. The company manufactures shoes and components for export and manages international supply chains. Organisations of this type routinely store records relating to production schedules, supplier contracts, shipping documentation and employee administration.

What data was at risk

The listing refers only to “internal files exfiltrated in ransomware attack.” No specific categories such as customer records, financial data or personal identifiers have been named. Manufacturing companies typically hold supplier agreements, order histories, logistics details and personnel files, yet the precise contents of the material claimed by thegentlemen have not been confirmed or described further.

The real-world impact

Exposure of internal operational files can create commercial disadvantages if competitors or counterparties obtain details of contracts, pricing or production methods. Individuals whose information appears in employee or partner records may face increased risk of targeted phishing or identity misuse. For the company, the incident adds the operational burden of investigating the intrusion, restoring systems and addressing any regulatory obligations that arise from the handling of personal or commercial data.

Were you affected?

Because the number of individuals involved has not been disclosed, anyone who has conducted business with Ty Thac Co. or worked at the company should treat the possibility of exposure as open. Practical first steps include monitoring bank and email accounts for unusual activity, using unique passwords and enabling multi-factor authentication. Readers can also run a free exposure scan of their email address against known breach data to check whether their information has appeared in previously published data sets.

AICompiled with AI assistance from public sources and published under our editorial standards.